pointer search

Started by ssbbdude57, February 01, 2009, 09:42:25 PM

Previous topic - Next topic

ssbbdude57

if i find an address then put it in memory viewer then it gives me the address i want which would i put in the pointer search? the address that i put in the memory viewer or the address i got from memory viewer?

Almas

If the address in memory tells you the address you actually want, then you've already found the pointer. See if that memory value consistently gives you the address you want. If it usually does, then add the DE000000 80008180 code, and if it only does on rare, specific occaisions, then you may be looking at a pointer in a pointer. In which case, find the location in memory which stores the value you want in two different situations, make a dump of both, then run the pointer search.

biolizard89

Quote from: Almas on February 01, 2009, 10:26:35 PM
If the address in memory tells you the address you actually want, then you've already found the pointer. See if that memory value consistently gives you the address you want. If it usually does, then add the DE000000 80008180 code, and if it only does on rare, specific occaisions, then you may be looking at a pointer in a pointer. In which case, find the location in memory which stores the value you want in two different situations, make a dump of both, then run the pointer search.
Not a pointer within a pointer, just a pointer with an offset.  Much easier to search for.